CVE-2024-13173CWE-306

Health information leakage vulnerability

Medium · published January 8, 2025

CVSS v4.0
6.3
EPSS
0%
Percentile
28.4
In the wild
Unconfirmed
What it is

The health module has insufficient restrictions on loading URLs, which may lead to some information leakage.

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N
EPSS
0.00359 · 28.4th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-01-08T07:44Z
EPSS history
Timeline
  • 08 JAN 07:44Z
    Health information leakage vulnerability
    cvelistv5